SQL injection

SQL injection is the name of a malicious hacker technique that allows users to retrieve data, alter server settings, or even take over a database server. SQL injection is not a SQL database problem, but a problem with improperly written applications. Most often, web-based applications with forms used in conjunction with scripted, dynamic SQL leave a database open to this sort of attack.
More Website and Internet